"Processing" of personal data means all handling of data, e.g. the collection, storage, keeping, use, modification, disclosure, archiving, deletion or destruction of data. The term "personal data" refers to data that relates to a specific or identifiable person, i.e. inferences may be drawn as regards their identity on the basis of the data itself or in combination with certain additional data. In the following, the term "personal data" is used synonymously with "data". "Sensitive personal data" is a category of personal data for which data protection law provides for stricter requirements. Sensitive personal data includes, for example, health data, data revealing racial and ethnic origin, information on religious or ideological convictions, biometric data for identification purposes or information on trade union membership.
"Helvetia as the data controller" processes personal data when interested parties, customers or other persons (collectively the "Data Subjects") apply for and/or acquire services or products and use Helvetia's "online services". The section "Special information on data protection" contains specific information on the processing of personal data within the scope of Helvetia's services or products. It contains information on the collection and processing of personal data, data categories, purposes and duration of the storage of personal data. The data protection information forms the basis for the processing of personal data within the scope of Helvetia's various business activities. In addition to this information on data protection, Helvetia informs data subjects about any business-specific processing of data in declarations of consent, declarations of release, general insurance and business terms and conditions or forms. In doing so, Helvetia makes sure that every data subject is informed about the data processing in an appropriate and timely manner, even if the personal data is not collected by the company itself.
This information on data protection is designed to comply with the requirements of the Swiss Federal Act on Data Protection ("FADP") and the EU's General Data Protection Regulation ("GDPR"). Whether and to what extent these laws are applicable depends on the individual case.
If Data Subjects wish to exercise the above rights, they may do so by contacting the relevant data controller. For central points of contact, please refer to section "Contact details for data protection concerns".
Data Subjects also have these rights vis-à-vis other independent data controllers that cooperate with Helvetia – Data Subjects are requested to contact them directly if they wish to exercise rights in connection with data processing carried out by such data controllers. For details regarding Helvetia's main cooperation partners and services providers, please refer to the "List of recipients and countries".
Data Subjects should note that, in accordance with the applicable data protection law, conditions, exceptions and restrictions apply to these rights. In particular, Helvetia may need to process and store personal data in order to fulfil a contract, to protect its own legitimate interests, such as the assertion, exercise or defence of legal claims, or to comply with legal obligations. To the extent permitted by law, in particular to protect the rights and freedoms of other Data Subjects and to safeguard legitimate interests, Helvetia may also reject a data subject request in whole or in part (e.g. by redacting certain content relating to third parties or business secrets). Helvetia will notify Data Subjects separately in such cases.